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IN THE SPECIFICATION 

The following paragraph will replace the prior version in the Specification. 

[0018] The invention describes a method for hardening a security mechanism against 
physical intrusion and substitution attacks. A user establishes a connection between a 
network peripheral device (42) and a network (44) via a security mechanism (40). The 
security mechanism (4G) includes read only memory (ROM) (22) that contains code that 
initiates operation of the mechanism and performs authentication functions. A 
persistent memory (24) contains configuration information. A volatile memory (26) 
stores user and device identification information that remains valid only for a given 
session and is erased thereafter to prevent a future security breach. A tamper-evident 
enclosure (32) surrounds the memory elements, which if breached, becomes readily 
apparent to the user Th e softwar e stored i n th e ROM (22) must bo construct e d co that 
a future compromise of the dovio e wi l l not advoro ol y affect the s e curity of past s e ssions 
and so that data that aff e cts th e l e vo l of s e curity provided to the user is obtained at tho 
b e ginning of each coscion. 
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